Self-stabilizing mutual exclusion on a ring, 
even if K = AT* 
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Abstract We show that, contrary to common belief, Dijkstra's self-sta- 
bilizing mutual exclusion algorithm on a ring [Dij74, Dij82] also stabilizes 
when the number of states per node is one less than the number of nodes 
on the ring. 
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1 Introduction 

In [Dij74, Dij82], Dijkstra presents the following mutual exclusion protocol for a 
ring of nodes 0, . . . , N where each node can read the state x[-} G {0, . . . , K — 1} 
of its anti-clockwise neighbour, and where node runs a different program than 
the other nodes. Dijkstra proves self-stabilization of this protocol to a configu- 



Node 0, privileged when x[0] = x[N] 

if x[0] = x[N] then x[0] := (x[0] + 1) mod K 
Node i, 1 < i < N, privileged when x[i] 7^ x[i — 1] 

if x[i] 7^ x[i — 1] then x[i] := x[i — 1] 



Protocol 1.1: Dijkstra's mutual exclusion protocol 



ration where only one node is privileged at a time, for K > N under a central 
daemon and says [Dij82]: "for smaller values of K, counter examples kill the as- 
sumption of self-stabilization" . Failing to find a counter example for K — N, we 
instead found the following proof that the system also stabilizes when K = N, 
provided that N > 1. 

Theorem 1.1. Even if K = N and N > 1, Dijkstra's mutual exclusion proto- 
col [Dij74, Dij82] (Protocol 1.1) stabilizes, under a central daemon, to a config- 
uration where only one node is privileged. 

Proof. We first define the legitimate configurations as those configurations that 
satisfy x[i] = a for all i with < i < j and x[i] = (a — 1) mod K for all i with 
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j < i < N + 1 for some choice of a and j. Hence the configuration where all 
nodes have the same state is legitimate. 

Dijkstra already showed (independent of any restriction on K) closure of the 
legitimate states, that no run of the protocol ever terminates, and that in each 
of these runs the exceptional node will change state (aka "fire") infinitely often. 

Let N > 1. Consider the case where node fires for the first time. Then 
just before that, x[0] = x[N] = 6 for some 6 and the new value of x[0] becomes 
6+1. Now consider the case when node fires again. Then just before that, 
x[0] = x[N] = b + 1. In order for node N to change value from b to 6+1, 
it must have copied 6+1 from its anti-clockwise neighbour x[N — 1] (which 
exists if TV > 1). This moment must have occurred after node changed state 
to x[0] = 6+1. But then, just after node N copies 6+1 from node N — 1 we 
actually have x[N - 1] = x[N] = x[0] =6+1. 

In other words, if N > 1, three different nodes hold the same value 6+1. Then 
the remaining N — 2 nodes can each take a different value from the remaining 
K — 1 values (unequal to 6 + 1), which means that if K > N (so in particular 
when K = N) at this point in time there is a value a (among these K — 1 values) 
not occurring as the state of any node on the ring. 

Because node fires infinitely often, eventually x[0] becomes a. Because the 
other nodes merely copy values from their anti-clockwise neighbours, at this 
point no other node holds a. The next time node fires, x[N] — x[0] = a. The 
only way that node N gets the value a is if all intermediate nodes have copied 
a from node 0. We conclude that for nodes, x[i] = a, which is a legitimate state. 

□ 
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